Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9jx4-_F7aXhuxrdX9tMtJOBCNuo.roa
File: 9jx4-_F7aXhuxrdX9tMtJOBCNuo.roa (raw, json)
Hash identifier: fuchczX84VzOD5SmTYQk7a7twbzEbUtAmJimLM5onG0=
Subject key identifier: F6:3C:78:FB:F1:7B:69:78:6E:C6:B7:57:F6:D3:2D:24:E0:42:36:EA
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AD53E091E90B7732B789CB85AB06F6A41
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9jx4-_F7aXhuxrdX9tMtJOBCNuo.roa
Signing time: Wed 27 Sep 2023 06:05:27 +0000
ROA not before: Wed 27 Sep 2023 06:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:d53d:1ef0/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d5:3e:09:1e:90:b7:73:2b:78:9c:b8:5a:b0:6f:6a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 27 06:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f63c78fbf17b69786ec6b757f6d32d24e04236ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8d:88:57:da:8e:ef:f2:9d:ca:18:cb:d8:a0:
56:08:b8:97:c0:37:18:11:9a:39:8a:07:8f:e2:fb:
fc:b6:59:3d:a7:0a:9a:32:12:3f:88:e7:eb:c1:17:
7e:b0:81:19:4b:47:2b:d3:b0:37:14:a9:af:f1:21:
f5:20:e0:5e:40:63:a9:c6:c9:b7:18:25:22:08:59:
68:ba:d0:b3:4e:a7:a5:47:a0:fb:0f:b8:86:75:31:
97:25:9f:0b:2a:ee:e0:83:2d:1b:46:5a:96:c8:f8:
39:2b:5b:d9:32:c0:3b:92:96:bf:6a:89:ed:a6:0b:
a5:32:10:9b:8a:a8:c2:2b:cb:78:11:aa:ab:c0:33:
69:b4:97:1e:7b:ed:eb:c8:13:93:dd:ed:18:16:67:
41:52:58:4f:3b:15:d4:44:de:47:a3:a0:35:29:45:
a5:7d:d6:c0:e7:6c:bf:68:37:60:11:cd:f9:0b:52:
40:13:80:0a:85:5f:cb:62:6b:23:b1:7a:a4:d9:f8:
e4:eb:93:ff:33:43:4e:c7:7b:3b:4d:23:d8:ff:3a:
6e:ac:34:9c:2a:3f:23:f6:20:1b:c8:bf:df:08:14:
fc:64:6d:af:75:7b:19:83:fd:fe:92:0a:dd:a4:cc:
be:67:f1:be:a5:ec:b1:d4:37:2f:e1:df:7c:0c:5f:
4a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3C:78:FB:F1:7B:69:78:6E:C6:B7:57:F6:D3:2D:24:E0:42:36:EA
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/9jx4-_F7aXhuxrdX9tMtJOBCNuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:ef:74:e4:c1:ed:62:d4:03:16:49:cc:d0:a0:53:32:ea:f7:
4d:f2:45:33:8f:ce:d0:a7:25:ab:00:ff:de:13:24:57:e0:fd:
f7:54:79:a4:6b:95:7e:8f:db:a9:54:af:02:81:e8:b1:3b:ed:
00:71:1a:73:f1:8e:fe:58:75:9d:bb:50:ed:a5:f7:67:97:20:
d2:6f:00:ff:e6:94:c5:99:fc:bc:00:aa:7a:cd:52:ca:4d:40:
4d:c5:7d:70:87:22:5c:96:67:78:c9:09:37:b1:dd:72:05:5a:
5b:7e:31:3d:94:a9:c2:d5:e8:c6:cd:c4:e4:97:6c:c0:8a:5f:
4f:c3:a4:48:b7:03:34:c2:8f:09:08:cd:56:29:c0:6b:d7:e7:
69:ca:e3:8d:c7:e6:12:95:2a:3d:8d:fc:1d:57:8b:58:8f:57:
13:29:47:07:96:fc:97:0b:e4:77:04:c6:60:a1:b5:fb:b4:81:
28:da:5f:cf:41:66:f7:75:95:b1:be:db:45:0e:95:89:a6:9f:
73:27:4b:47:9b:c6:2c:90:3b:ef:e9:37:cf:3c:94:bf:d4:d6:
21:11:65:c5:6a:ef:0b:4a:74:1e:b1:82:65:08:4b:c2:1b:e3:
0a:70:f4:3a:04:e8:16:85:50:fe:dc:97:ec:71:10:bd:8d:5f:
36:f3:22:da
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrVPgkekLdzK3icuFqwb2pBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTI3MDYwNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjNjNzhmYmYxN2I2OTc4NmVjNmI3NTdmNmQzMmQyNGUwNDIzNmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY2IV9qO7/KdyhjL2KBWCLiXwDcY
EZo5igeP4vv8tlk9pwqaMhI/iOfrwRd+sIEZS0cr07A3FKmv8SH1IOBeQGOpxsm3
GCUiCFloutCzTqelR6D7D7iGdTGXJZ8LKu7ggy0bRlqWyPg5K1vZMsA7kpa/aont
pgulMhCbiqjCK8t4EaqrwDNptJcee+3ryBOT3e0YFmdBUlhPOxXURN5Ho6A1KUWl
fdbA52y/aDdgEc35C1JAE4AKhV/LYmsjsXqk2fjk65P/M0NOx3s7TSPY/zpurDSc
Kj8j9iAbyL/fCBT8ZG2vdXsZg/3+kgrdpMy+Z/G+peyx1Dcv4d98DF9KhQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPY8ePvxe2l4bsa3V/bTLSTgQjbqMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvOWp4NC1fRjdhWGh1eHJkWDl0TXRKT0JDTnVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ3vdOTB7WLUAxZJzNCg
UzLq903yRTOPztCnJasA/94TJFfg/fdUeaRrlX6P26lUrwKB6LE77QBxGnPxjv5Y
dZ27UO2l92eXINJvAP/mlMWZ/LwAqnrNUspNQE3FfXCHIlyWZ3jJCTex3XIFWlt+
MT2UqcLV6MbNxOSXbMCKX0/DpEi3AzTCjwkIzVYpwGvX52nK443H5hKVKj2N/B1X
i1iPVxMpRweW/JcL5HcExmChtfu0gSjaX89BZvd1lbG+20UOlYmmn3MnS0ebxiyQ
O+/pN888lL/U1iERZcVq7wtKdB6xgmUIS8Ib4wpw9DoE6BaFUP7cl+xxEL2NXzbz
Ito=
-----END CERTIFICATE-----
Generated at Fri Jun 20 07:51:55 2025 by rpki-client